CVE-2001-0124

CVE-2001-0124 describes a buffer overflow in the Solaris utility exrecover on Solaris 2.6 and earlier, potentially allowing a local user to gain privileges via a long command line argument. The connected documents do not specify a vendor patch/version or a remediation. The exploitation status is ...

CVE-2001-0010

Buffer overflow in transaction signature TSIG handling code in BIND 8 allows remote attackers to gain root privileges...

CVE-2001-0054

Directory traversal vulnerability in FTP Serv-U before 2.5i allows remote attackers to escape the FTP root and read arbitrary files by appending a string such as "/..%20." to a CD command, a variant of a .. dot dot attack...

CVE-2001-0111

Format string vulnerability in splitvt before 1.6.5 allows local users to execute arbitrary commands via the -rcfile command line argument...

CVE-2001-0267

NM debug in HP MPE/iX 6.5 and earlier does not properly handle breakpoints, which allows local users to gain privileges...

CVE-2001-0279

Buffer overflow in sudo earlier than 1.6.3p6 allows local users to gain root privileges...

CVE-2001-0326

Oracle Java Virtual Machine JVM for Oracle 8.1.7 and Oracle Application Server 9iAS Release 1.0.2.0.1 allows remote attackers to read arbitrary files via the .jsp and .sqljsp file extensions when the server is configured to use the FilePermission...

CVE-2001-0218

Format string vulnerability in marsnwe 0.99.pl19 allows remote attackers to execute arbitrary commands...

CVE-2001-0015

CVE-2001-0015 affects Windows 2000 via the Network Dynamic Data Exchange (DDE) component. The vulnerability allows a local attacker to elevate privileges to Local System by sending a WM_COPYDATA message to an invisible DDE window that runs with WINLOGON privileges, enabling arbitrary command exec...

CVE-2001-0130

The CVE-2001-0130 entry describes a buffer overflow in the HTML parser of Lotus Domino components: Lotus R5 Domino Server prior to 5.06 and Domino Client prior to 5.05. The overflow is triggered by a malformed font size specifier and can allow remote attackers to cause a denial of service and pot...

CVE-2001-0115

The CVE describes a buffer overflow in the arp command on Solaris 7 and earlier, exploitable locally via a long -f parameter. Affected component: arp. Root cause: inadequate bounds checking in the -f option. Impact, as per the sources: complete confidentiality, integrity, and availability losses ...

CVE-2001-0289

The CVE-2001-0289 entry concerns the joe text editor (version 2.8). It vulnerably searches for a .joerc configuration file in the current working directory, the user’s home directory, and then /etc/joe. This enables a local attacker to place a Trojan Horse .joerc in a directory and cause other us...

CVE-2001-0169

CVE-2001-0169 : The GNU C Library (glibc) fails to verify that libraries loaded via LD_PRELOAD into SUID/SGID processes are also non-SUID/non-SGID when they come from /etc/ld.so.cache, enabling a local user to pre-load a library from /lib or /usr/lib and overwrite privileged files. Documented in ...

CVE-2001-0043

Affected software: PhpGroupWare (before 0.9.7). The vulnerability allows remote attackers to execute arbitrary PHP commands by specifying a malicious include file in the phpgw_info parameter of phpgw.inc.php, due to an include/file inclusion flaw. The described impact is remote command execution ...

CVE-2001-0118

CVE-2001-0118 affects rdist 6.1.5 and describes a local vulnerability where an attacker can overwrite arbitrary files via a symlink attack. The Connected documents corroborate the issue as a local symlink-based overwrite vulnerability. No specific remediation, affected versions beyond 6.1.5, expl...

CVE-2001-0138

CVE-2001-0138 affects wu-ftpd; the privatepw helper allows a local user to overwrite arbitrary files via a symlink attack in wu-ftpd before version 2.6.1-6. The issue stems from a temporary file handling weakness. Mitigation: upgrade wu-ftpd to 2.6.1-6 or newer (as reflected in Debian/Mandrake ad...

CVE-2001-0157

Debugging utility in the backdoor mode of Palm OS 3.5.2 and earlier allows attackers with physical access to a Palm device to bypass access restrictions and obtain passwords, even if the system lockout mechanism is enabled...

CVE-2001-0318

Format string vulnerability in ProFTPD 1.2.0rc2 may allow attackers to execute arbitrary commands by shutting down the FTP server while using a malformed working directory cwd...

CVE-2001-0274

kicq IRC client 1.0.0, and possibly later versions, allows remote attackers to execute arbitrary commands via shell metacharacters in a URL...

CVE-2001-0259

The connected sources confirm a vulnerability in SSH Communications Security SSH versions 1.2.27–1.2.30 when Secure-RPC is enabled. A local attacker can cause the system to recover the SUN-DES-1 magic phrase generated for another user, which can then decrypt that user’s private key file. This wea...